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A major goal of developing high-precision control of many-body quantum systems is to realise their 
potential as quantum computers. Probably the most significant obstacle in this direction is the prob- 
lem of "decoherence" : the extreme fragility of quantum systems to environmental noise and other 
control limitations. The theory of fault-tolerant quantum error correction has shown that quantum 
computation is possible even in the presence of decoherence provided that the noise affecting the 
quantum system satisfies certain well-defined theoretical conditions. However, existing methods for 
noise characterisation have become intractable already for the systems that are controlled in today's 
labs. In this Report we introduce a technique based on symmetrisation that enables direct experi- 
mental characterisation of key properties of the decoherence affecting a multi-body quantum system. 
Our method reduces the number of experiments required by existing methods from exponential to 
polynomial in the number of subsystems. We demonstrate the application of this technique to the 
optimisation of control over nuclear spins in the solid state. 

Quantum information enables efficient solutions to certain tasks which have no known efficient solution in the 
classical world. This discovery has reshaped our understanding of computational complexity and emphasized the 
physical nature of information. A necessary condition to take advantage of the quantum world is the ability to gain 
robust control of quantum systems and, in particular, counteract the noise and decoherence affecting any physical 
realisation of quantum information processors (QIPs). A pivotal step in this direction came with the discovery of 
quantum error correction codes (QECCs)[Tl|2] and the associated accuracy threshold theorem for fault-tolerant (FT) 
quantum computation [3j 131 |5l [6]. In order to make use of quantum error correction and produce fault-tolerant 
protocols, we need to understand the nature of the noise affecting the system at hand. There is a direct way to fully 
characterise the noise using a procedure known as process tomography [71 [51 [5]. However, this procedure requires 
resources that grow exponentially with the number of subsystems (usually two-level systems called 'qubits'). As 
a result, process tomography is an intractable procedure for characterizing the multi-qubit quantum systems that 
have already been realised [TOl [HI [12]. In this letter we introduce a general symmetrisation method that allows 
for direct experimental characterisation of relevant features of the noise. We apply this framework to develop an 
efficient experimental protocol for characterising multi-qubit correlations and memory effects in the noise. Compared 
to existing methods [7', [H [3], the protocol yields an exponential savings in the number of experiments required to 
obtain such information. In the context of applications, this information enables tests of some key assumptions 
underlying estimates of the FT threshold and optimisation of error-correction strategy. Moreover, the estimated noise 
parameters are immediately relevant for optimizing experimental control methods. We demonstrate this optimization 
through an implementation of the protocol on a solid-state nuclear magnetic resonance (NMR) QIP. 

We focus here on the noise affecting a system of n qubits. The crucial point is that a complete description of 
a general noise model A requires 0(2^") parameters. Clearly an appropriate coarse-graining of this information is 
required; the challenge is to identify efficient methods for estimating the features of practical interest. The method 
we propose is based on identifying a symmetry associated with the properties of interest, and then operationally 
symmetrizing the noise process to yield an effective map A with a reduced number of independent parameters that 
reflect these properties (see Fig. [ij. This symmetrization is achieved by conjugating the map with a unitary operator 
drawn from the relevant symmetry group (see Fig. [2]) and then averaging with respect to that group [T?l [HI [T^ [T51 [T7] . 
As described below, rigorous bounds guarantee that the number of experimental trials required remains independent 
of the dimension of the group. Hence the randomization method leads to efficient partial characterization of the map 
A whenever the group elements admit efficient circuit decompositions. 

We apply this general idea to the important problem of estimating the noise parameters that determine the perfor- 
mance of a broad class of QECCs and the applicability of certain assumptions underlying FT thresholds. In general, 
QECCs protect quantum information only against certain types of noise. A distance-(2i -I- 1) code refers to class 
of codes that correct all errors simultaneously affecting up to t qubits. Hence the distance of an error correcting 
code determines which terms in the noise process will be corrected and which will remain uncorrected. The latter 
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FIG. 1: Schematic illustration of coarse-graining via symmetrization. A general quantum process A is described by 
a finite but very large number of independent parameters (represented by shaded circles). Averaging the map by conjugation 
under sets of operators drawn from an appropriate symmetry group yields an effective quantum process which has a reduced 
number of independent parameters. In the figure we illustrate the results of two different symmetrization groups (represented 
by (a) red and (b) blue) which take the parameters around closed orbits. The reduced (coarse-grained) parameters of the 
averaged quantum process A can be determined by selecting a set of initial states pi such that the output states A(pi) carry 
a signature of the reduced parameters. In this work, we design and implement a symmetrization protocol that is relevant 
for characterizing the performance of quantum error correcting codes and testing some of the assumptions of fault-tolerance 
threshold theorems. 



contribute to the overall failure probability. Of course, it is possible to estimate the failure probability under the 
assumption that the noise is independent from qubit to qubit [6 or between blocks of qubits. Many fault-tolerance 
theorems assume this kind of behavior. Hence a fundamental problem is to measure the correlations in the noise for a 
given experimental arrangement without the exponential overhead of process tomography. We report here a protocol 
that achieves this goal. We also show that this protocol remains efficient also in the context of an ensemble QIP with 
highly mixed states [l8] . 

We start by expanding the noise operators in a basis of operators Pi £ Vn, which consist of n-fold tensor product of 
the usual single-qubit Pauli operators {1,X,Y, Z} satisfying the orthogonality relation Tr[PiPj] = DSij. The Clifford 
group Cn is defined as the normalizer of the Pauli group Vn- it consists of all elements Ui of the unitary group U{D) 
satisfying UiPjUj E Vn for every Pj e Vn- The protocol requires symmetrizing the channel A ^ A by averaging over 
trials in which the channel is conjugated by the elements of Ci applied independently to each qubit (see Fig. [2|. An 
average over conjugations is known as a "twirl" [16, 19 , and hence the above is a Cf^'-twirl. 

Separating out terms according to their Pauli weight w, where w G {0, . . . , n} is the number of non-identity factors 
in Pi, letting the index £ {1, . . . , (^)} count the number of distinct ways that w non-identity Pauli operators 
can be distributed over the n factor spaces and the index i^, = {ii, . . . ,iw} with ij £ {1,2,3} denote which of the 
non-identity Pauli operators occupies the j'th occupied site, we obtain 

n iZ) 

= X] 51 '^W,'^u,'^Pw,,.^,i^pPw,l^^,i^ (1) 

W — U-uj — l inj 
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FIG. 2: Schematic quantum circuit for one experimental run consisting of a conjugation of the noise process A. Time flows 
from left to right. The standard protocol requires conjugation only by an element d £ C®", whereas the ensemble protocol 
requires conjugating A also by a permutation tts £ 5„_u,' C S„ of the n qubits. The standard protocol requires only one (pure) 

input state |0)®", whereas the ensemble protocol requires n distinct input operators p„/ = Z®™ ^ with w G {1, n}. 

In either case the protocol involves running this circuit k = C'(log(2(n + times for each input configuration to estimate 

the n + 1 output parameters to precision J with constant probability. 



where t^ ^,^ = a,^,v^\^- (Details of this derivation are given in the appendix.) If the symmetrized channel 

is probed by the initial state |0) = |0)®", followed by a projective measurement of the output state in the basis 
this yields an n-bit string I S {0, 1}". Let q^i denote the probability that a random subset of w' bits of the binary 
string I has even parity. Noting that c^,' = (Z**™') = 2(7^/ — 1, where Z®™' is the average of all Pauli operators with 
vJ factors of Z and n — w' identity factors, we obtain p,,, = , fi"^ ,c,„' where the matrix , is a matrix of 
combinatorial factors given in the appendix, and the are the probabilities of w simultaneous qubit errors occurring 
over the course of the quantum process. Of course all imperfections in the protocol contribute to the total probabilities 
of error. The protocol can be made robust against imperfections in the input state preparation, measurement and 
twirling by substituting c^,' — > c-u,i = Cw' / {Z^^')q, where we simply factor out the expectation value observed when 
the protocol is performed without the noisy channel. In this case the probabilities of different error weights are given 
Pw = E^' ^w^w'^w'- 

If in each single shot experiment the Clifford operators are chosen uniformly at random then with K = C'(log(2(n + 
l))/(5^) experiments we can estimate each of the coefficients to precision S with constant probability. The c^,' can 
be applied directly to test some of the assumptions that yield rigorous estimates of the fault-tolerance threshold [2Q\ . 
In particular, a noisy channel with an uncorrelated distribution of error locations, but with arbitrary correlations in 
the error type at each location, is mapped under our symmetrization to a channel which is a tensor product of n 
single-qubit depolarizing channels. A channel satisfying this property will exhibit the scaling Cy, = Ci . Hence observed 
deviations from this scaling law imply a violation of the above assumption. Furthermore, the question of whether 
the noise exhibits non-Markovian properties can be tested efficiently by repeating the above scheme for distinct time- 
intervals rriT with increasing m. Markovian noise is guaranteed to satisfy the semi-group property At-j o A^.^ = At-i+t2j 
and hence memory effects in the noise are implied by any observed deviations from the condition c„(mT) = (cu,(r))™. 

The estimates Cw' also give estimates for p^, but the statistical uncertainty for p^, grows exponentially with w. Using 
a bound on derived in the appendix, we show that all for which w < I can be estimated with O(n') trials. 

This allows for characterisation of other important features of the noise. The probability po is directly related to the 
entanglement fidelity of the channel and hence this protocol provides an exponential savings over recently proposed 
methods for estimating this single figure of merit [TSll^E^ (see also Ref. [TF|). Hence, by actually implementing any 
given code we can bound the failure probability of that code with only 0{log{2n)/S'^) experiments without making 
any theoretical assumptions about the noise. Moreover, on physical grounds we may expect the noise to become 
independent between qubits outside some fixed (but unknown) scale b, after which the decrease exponentially with 
w. The scale b can be determined efficiently with experiments. 

While a characterisation of the twirled channel is useful given the relevance of twirled channels to fault-tolerant 
applications |231 124j , we remark that the failure probability of the twirled channel gives an upper bound to the failure 
probability of the original un-twirled channel whenever the performance of the code has some bound that is invariant 
under the symmetry associated with the twirl. This holds quite generally in the context of the symmetry considered 
above because the failure probability of a generic distance-2i + 1 code is bounded above by the total probability of 
error terms with Pauli weight greater than t and this weight remains invariant under conjugation by any element 

Our method provides an efficient protocol for the characterisation of the noise in contexts where the target transfor- 
mation is the identity operator, e.g. a quantum communication channel or quantum memory. However, the protocol 
also provides an efficient means for characterising the noise under the action of a non-identity unitary transformation 
such as a quantum gate. There are two ways to adapt the protocol to this setting. First, we recall that a unitary 
transformation can be decomposed into a product of basic quantum gates drawn from a universal gate set, where 
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each gate in the set acts on at most 2 qubits simultaneously. Hence, the noise map acting on all n qubits associated 
with any 2-qubit gate can be determined by applying the above protocol to other n — 2 qubits while applying process 
tomography to the 2 qubits in the domain of the quantum gate. A second approach is to estimate the average error- 
per-gate for a sequence of m gates such that the composition gives the identity operator. Such a sequence can be 
generated by making use of the cyclic property U"^ = 1 of any gate in a universal gate set, or by choosing a sequence 
of m — 1 random gates followed by an m'th gate chosen such that the composition gives the identity transformation 

m 
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TABLE I: Summary of experimental results. The first four sets of experiments (three sets on the two-qubit liquid-state 
system, and one on the three-qubit solid-state system) were designed to characterise the performance of the protocol under 
engineered noise. The last two sets were designed to characterize the (unknown) natural noise due to imperfect averaging 
of the internal Hamiltonian terms under a multiple-pulse time-suspension sequence [26] with (a) one cycle with lO/xs pulse- 
spacing, and (b) two cycles with 5/xs pulse-spacing. The latter experiments characterized the residual errors under the sequence 
with respect to the particular symmetry implemented by the twirling process. The results of the solid-state experiments are 
calculated after factoring out the effect of decoherence occurring during the twirling operations (which only accounted for ~ 1% 
fidelity loss per gate) in order to isolate the noise associated with the time-suspension sequence. 

We now describe how the above protocol is efficient also in the context of an ensemble QIP |18j. First, we prepare 
deviations from the identity state of the form p^, = Z®*"' (g) with w' = {1, ... n}. Hence the (non-scalable) 

preparation of pseudo-pure states is not required. Second, we directly measure l^Z®^') for each w' from the expectation 
value I^Z®^ ][^«in-ii) ^ j^y explicitly performing a random permutation of the qubits. Let Sn.w' denote any subset of 
the group of permutations of n qubits, 5„, such that 'Y1,s^sPw'T^\ = 'Ylv , Pw ,v^, , where v^i g {1, (^/)} denotes 
each distribution of the w' Z-Pauli operators. As illustrated in Fig. [2j the symmetrisation consists of conjugating the 
process A with Ci € Cf" and tTs G Sn,w' ■ Let A^.s stand for the conjugated noise-map, then, given input operator 
Pw', the output is cr°"*j ^ = Ai^s{pw')- Averaging the output operators cr°"'j ^ over i and s gives the input operator 
scaled by c^' ■ 

We illustrate an implementation of the above protocol on both a 2-qubit (chloroform CHCI3) liquid-state and a 3- 
qubit (single-crystal Malonic acid C3H4O4) solid-state NMR QIP (see the appendix for more information on methods). 
The results of six sets of experiments are summarized in Tabic |T] and detailed results for one liquid-state set are shown 
in Fig. |3] and for two solid-state sets are shown in Fig. [4j The first four sets of experiments were performed under 
engineered noise to both characterize the performance of the protocol and to confirm high-fidelity control. Two final 
two sets of experiments were performed in the solid-state to characterize the unknown residual noise occurring under 
(a) one cycle of a C48 pulse sequence with pulse spacing, and (b) two cycles of C48 with 5^s pulse spacing. 
The C48 sequence is designed to suppress the dynamics due to the system's internal Hamiltonian. The evolution 
of the system under this pulse sequence can be evaluated theoretically by calculating the Magnus expansion [57] of 
the associated effective Hamiltonian, under which the residual effects appear as a sum of terms associated with the 
Zeeman and dipolar parts of the Hamiltonian, including cross terms. Roughly speaking, effective suppression of the 
A;*^ term of the Hamiltonian takes places when jkTk ^ 1, where 7^ is the strength of the term and r^T^ is the rate at 
which it is modulated by the pulse sequence. Generally shorter delays lead to improved performance unless there is a 
competing process at the shorter time-scale or there are limitations due to pulse imperfections. Hence the performance 
of the pulse sequence is best evaluated via experimental characterisation. The results shown in Table [l] and Fig. [4] 
illustrate how the protocol can compare the performance of the two multiple-pulse time-suspension sequences both in 
terms of the overall fidelity and in terms of the relative probability of one, two and three body noise terms. 

The method above is an illustration of the first step in a hierarchy of tests that are available under the general 
approach, with each test giving more fine-grained information. For example, a variation of the protocol in which only 
a Pauli-twirl is applied enables a estimation of the 0{n^) relative probabilities of Pauli X, Y and Z errors. This 
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FIG. 3: Results for experiment #3 in Table |lj Shown is the Maximum Lilcelihood (ML) estimate, Pexp = 
[0. 254 +jiJ JJJ°, 0.495 +J5 °2j,0. 250 +J] JJj^], for the error probabilities of the engineered noise, Ai = {exp[-if (Zi + Z2)]}, for 
which the calculated values are p = [|i |i j]- Also shown are the confidence regions for the 68%, 95%, and 99% confidence 
levels (C.L.), which can be determined from the log of a likelihood function, logL. The experiment was performed on a 2-qubit 
liquid-state NMR processor, and the noise was implemented by appropriately phase-shifting the pulses. These experiments 
illustrate the precision with which the protocol can be implemented under conditions of well-developed quantum control. 

more fine-grained information is useful not only for optimisation over QECC in eventual applications, but also to 
characterize current performance of a given experimental set-up. The full scope of information that can be estimated 
efficiently via this general symmetrisation approach is an important topic for further research. A specific question 
in this direction is to determine whether this approach might enable efficient detection of the presence of noiseless 
subsystems. 

APPENDIX A: ANALYSIS OF THE SYMMETRISATION 

The generic noise affecting a quantum state p (a positive matrix of dimension D x D) can be represented by a 
completely positive map of the form A(p) = ^^^^ A^pJ^^, which is normally subject to a trace-preserving condition 
A^Ak — 1. We focus here on systems of n qubits so that Z) = 2". 

We start by expanding the noise operators in a basis of Pauli operators Pi E Vn consists of n-fold tensor product of 
the usual single-qubit Pauli operators {I, X,Y, Z}, giving Ak = Si^i where af^^ = Tr[AkPi]/\^, and 
the Pauli's satisfy the orthogonality relation Ti[PiPj] — DSij. The Clifford group C„ is defined as the normalizer 
of the Pauli group Vn- it consists of all elements Ui of the unitary group U{D) satisfying UiPjUj € Vn for every 
P3 e Vn- 

We can analyze the effect of the twirl Cf" by noting that any element Ci £ Cf" can be expressed as C; = PjYi, 
where Pj G Vn and Yi S yf", and where we consider as equivalent elements of each group that differ only by a phase. 
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FIG. 4: Results for experiments :?^5 and #6 in Table [T} Shown are projections of the 4-dimensional likelihood function 
onto various probability planes. The asymmetry seen in some of the confidence areas is a result of this projection. The results 
for one cycle with lOfis pulse-spacing (exp #5) are in red and the results for two cycles with 5/is spacing (exp #6) are in blue. 
The rate set by a pulse-spacing of 10/iS leads to a poor overall fidelity for the time-suspension sequence, and, in particular, a 
significant probability of two-qubit errors from the residual terms in the effective Hamiltonian. Under two repetitions of the 
sequence with the pulse-spacing of 5^s (which has twice as many pulses as the single sequence with the 10/is spacing), the 
probability of two-qubit errors in the residual terms decreases substantially. The overall fidelity of either pulse-sequence is still 
limited by incomplete heteronuclear decoupling of the qubits (carbon nuclei) from the environment (nearby hydrogen nuclei): 
at the 5/is pulse-spacing the carbon nuclei are being modulated on a time-scale close to the proton decoupling frequency, so that 
the decoupling sequence no longer averages the heteronuclear coupling to zero. A simple extension of the protocol allows for 
determining which qubit accrues the greatest single qubit errors from this effect. The results were consistent with identifying 
the primary source of single-qubit errors as the qubit whose coupling to the hydrogen is an order of magnitude larger than that 
of the other two. By increasing the decoupling power we were able to reduce these errors though they could not be removed 
completely due to hardware limitations. 



Hence, the Cf "-twirl of an arbitrary channel A consists of the action 

15?"! IP. I 

Mp) - Mp) = ^ E E E s}p!a,p,s,ps]pIaIp,s,. (2) 
1^1 I j=l 1=1 k 

where |Cf"| = |5f "| The effect of the Pauli-twirl is to create the channel J^i aiPtpPi, where Oi = J^k l"f 

are probabilities, known as a Pauli channel. The effect of the symplectic-twirl on the Pauli channel is to map each of 
the non-identity Pauli operators to a uniform sum over the 3 non-identity Pauli operators. To express this we separate 
out terms according to their Pauli weight w, where w € {0, . . . , n} is the number of non-identity factors in Pi. We let 
the index i/.^, e {1, . . . , (^)} count the number of distinct ways that w non-identity Pauli operators can be distributed 
over the n factor spaces, and the index = {ii, ■ ■ ■ , iw} with ij e {1, 2, 3} denote which of the non-identity Pauli 
operators occupies the j'th occupied site. Hence we have, 

^ I5f"l „ iZ) 3" 

^^P^ ~ I <^«in| E E E E ^ii', I'm, iuj'S'j^iu, I'll,, i™'5'jP'S'jPtt,^i/^4^5j. (3) 
' 1 ' j=l 10=0 i/„ = l i„ = l 
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Now, for any term with arbitrary but fixed w and i/^, we have the expression, 



<lw.i/....i... ^ ^\Pw,v^,i^SjpSjPyj^v^^i^Sj = ( '^'^^0'w,Vm,im j ^ ] pPyj ■ (4) 



1*^1 I i»=l 



Consequently we obtain, 

n (») 3" 

^(^) = X] XI X P->^,'^w,iv,PPw,u^,i„ (5) 

where r^.i/^ = 557 at(;,i/„,i„- If we explicitly apply random qubit permutations chosen uniformly, then the 

effective channel is given by 

^ n ("■) 3™ ^ 

where 

C) 

This symmetrized channel can now be probed experimentally by inputting the initial state |0) = |0)®" and per- 
forming a projective measurement in the computational basis \l), where I G {0, 1}". If we distinguish outcome bit 
strings only according to their Hamming weight /i G 0, . . . , n, the effect is equivalent to a random permutation of the 
qubits. Observe that only Pauli X and Y errors will affect the Hamming weight because Pauli Z errors commute 
with the input state. Hence the probability of measuring an outcome with Hamming weight h is 

n 

Wfe = X ^hwPw 

where Rhw = (/^)2''/3"' gives the number of Pauli operators of weight w of which exactly h are either X or Y, and 
where 

is a quantity of interest, i.e., the total probability of all PauU errors with weight w. Noting that the n x n matrix 
Rhw satisfies Rhw = when h > w and hence is upper triangular, estimates of the Pw can be recovered trivially from 
the measured probabilities Uh after n back-substitutions. In another approach, if we distinguish outcome bit strings 
only by the parity of a random subset of w qubits, then the effect is also equivalent to a random permutation of the 
qubits. Thus, experimentally we implement A(p) via twirling, but access the parameters of A (p) by averaging over 
random choices of subsets of w qubits. The probability that the parity of random subset of w qubits is even is 
related to (Z^) via 



Cw = {Z^"") = qw-{l- Qw) = 2qw - 1, (9) 

where we have defined the variable Cw for ease of notation. In order to analyze the information content of the Cw 
and their relation to the error probabilities Pw it is convenient to consider the Liouville representation of the twirled 
channel. 

Liouville Representation of the Twirled Channel 

Because any two operators Pm,vm,im ^ ^™ either commute or anti-commute, it follows that 

a" {Pm,^m,im) = (Pr(comm) - Pr(anti-comm)) Pr»,i/„,i„ = CmPm,i^m,im' (10) 
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where Pr(comm) (Pr(anti-comm)) is the probabihty of the channel a'^ acting with a noise operators Pw,u^,i^ which 
commutes (anti-commutes) with Pm, Thus, the Pauli operators -Pm, i/„,i„, are the eigenoperators of the channel 
with corresponding eigenvalues Cm- The eigendecomposition of A is given by 

n 

a"(p) = ^ c^M^ip), (11) 

where are the superoperators 

C) 3™ 

MM = ^ E E ^-,.™4™tr(P„,.„,i„p). (12) 

i^u,=0 i„=0 

We can also rewrite the usual parameterisation of a'^ as 

n 

A''{p) = Y.Pn.MP{p), (13) 

where are the superoperators 

mp) = E E (14) 

By considering the Liouville representation of these superoperators it is easy to show that the are orthogonal and 

that the are orthogonal. Thus, {cu,}Ji=o parameterizes the channel A^ uniquely, and {pw}w=o also parameterizes 
the same channel uniquely. Using the Liouville representation it follows that these parameterizations are related by 
a (n + 1) X (n + 1) matrix Q such that 



Cnj — ^ ^ Ptn'^w^w' J (1^) 
ui'=0 
n 

Pw = E ^^''^^^w (16) 



w'=0 



with fl defined by 



n-^^,^{MP,M^,), (18) 
where (•,•) is the Hilbert-Schmidt inner product of superoperators acting on Liouville space defining the notion of 



orthogonality discussed above. To obtain an explicit expression for ^w,w' , we start from ( 10 1 and observe that a Pauli 
operator of weight w is scaled by a channel of the form 

\w') i/^,=Oi, ,=0 



This implies 

min(m.t(j) /n- 



^™.. = -i+ E S»r .1' ^ (20) 

L— max(0,i(J+m— n) 



and, using (17) and (18 1, it follows that 



nm+w fn\ /n\ 
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Simple examples 



For the case of two-qubit channels, this matrix is given by 

/l 

n = 1 



1 



1 



l\ 
1 

"3 



1 

16 



(l 


6 


9\ 


6 


12 


-18 




-18 





and for the case of three-qubit channels, it is given by 



fl = 



1 

9 

_5_ 
27 



1 

64 



1 - 


1 

3 


1 1 

9 27 


/ 


1 1 


9 


27 


27 


9 


45 


27 


-81 


27 


27 


-135 


81 


1^27 


-81 


81 


-27 



(22) 



(23) 



(24) 



(25) 



APPENDIX B: UNCORRELATED NOISE LOCATIONS 



A noise channel over n qubits that has a distribution of error locations which is uncorrelated, but otherwise 
arbitrary, is mapped under twirling and random permutations to a channel which is a tensor product of n single-qubit 
depolarizing channels. Each of these single-qubit channels has the form 

V{p) = (1 - p)p + I (XpX + YpY + ZpZ) (26) 

and scales a single-qubit Pauli operator by ci = 1 — |p. Thus, the n qubit channel will scale a Pauli operator with 
weight whj = Ci- 

Due to the finite accuracy with which the cigcnvahics arc estimated through experiment, wc can only impose 
this as a necessary condition for the independence of the distribution of error locations. Therefore, any estimate of 
the eigenvalues which makes such an exponential dependence unlikely, also implies that the distribution of the error 
locations is unlikely to be uncorrelated. 



APPENDIX C: STATISTICAL ANALYSIS 



The circuit complexity is depth 2 with only 2n single-qubit gates required for the protocol. The outcome from any 
single experiment is just a binary string. The number of such trials required to estimate the probability q,^i of even 
parity for a random subset of w' bits to within a given precision 5 is clearly independent of the number of qubits 
because the problem is reduced to the simple task of estimating the probability of a 2-outcome classical statistical 
test. More precisely from the Chernoff inequality, any estimate of the exact average E[X] = after K independent 
trials satisfies, 

1 ^ 

Pr(|— -E[X]| >5)< 2exp(-52/s:). (27) 

i=l 
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We see that the number of experiments required to estimate to precision S with constant probability is at most, 

= iog(2)r2, 

where each experiment is an independent trial consisting of a single shot experiment in which the Clifford gates are 
chosen uniformly at random. The number of experimental trials required to estimate the complete set of probabilities 
{go, • • • , Qw, ■ ■ ■ In} can be obtained from the union bound, 

FiiuM <Y.^<£w) (28) 

w 

which applies for arbitrary events 8w In our case each is associated with the event that X^a^i -^k ~ ^[-^] \ > ^ 
and similarly Uw£w is the probability that at least one of the n + 1 estimated probabilities satisfies this property 
(i.e., is an unacceptable estimate) after K trials. Whence, the probability that at least one of the n+1 estimated 
probabilities is outside precision 6 of the exact probability is bounded above by. 

This implies that at most K = 0{5~'^ log(2(n+l))) experimental trials are required to estimate each of the components 
of the (probability) vector (go, ■ • ■ , In) to within precision S with constant probability. 



Uncertainty of Estimates 

Given an estimate of the = [Z®"^) with some variance cr^, the variance of the estimate of a particular is given 

by 

n n 

^l-HH "^jCov(c., c,) (29) 
z=o i=o 

Assuming the estimates for all have the same variance, the positivity constraint on the covariance matrix of the 
Cu, estimates requires that |Cov(ci,Cj)| < a^, yielding the upper bound 

-^<-^EEi"^.^"^^:.i- (30) 



From (10 1, it is clear that 



so the from (21) we have 



Using the fact that 



|f^»,»'|<l, (31) 



< a3"' ( ^ ) . (32) 



77 \ n e 

^<^, (33) 



we can rigorously show that the uncertainty cr^ on the estimate of p^ is bounded by 



(T„ < a I - ) n'"e'". (34) 



w 



Exact numerical computation of the uncertainty scaling factor depicted in Figure |5] indicates that for fixed w 
the uncertainty grows as a polynomial in n, but the degree of that polynomial depends linearly on w. For large n, we 
find that 



cr 
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where 



fc = -1.62521 ± 0.09716 (36) 

a = 11.854 ± 1.785 (37) 

m = 0.638924 ±0.0089 (38) 

-0.982147 ±0.1647. (39) 



APPENDIX D: METHODS 



The two-qubit liquid-state experiments were performed on a sample made from lOmg of ^ C labeled chloroform 
(Cambridge Isotopes) dissolved in 0.51ml of deuterated acetone. The experiment was performed on a 700MHz Bruker 
Avance spectrometer using a dual inverse cryoprobe. The pulse programs were optimized on a home-built pulse 
sequence compiler which pre-simulates the pulses in an efficient pairwise manner and takes into account first order 
phase and couphng errors during a pulse by modifications of the refocussing scheme and pulse phases The 
solid-state experiments were performed on a single crystal of malonic acid which contained ~7% triply labeled ^^C 
molecules [30j . The experiments were performed at room temperature with a home-built probe. Apart from an initial 
polarization transfer, the protons were decoupled using the SPINAL64 sequence [31]. The required control fields 
that implemented the unitary propagators and state-to-state transformations were found using the GRAPE optimal 
control method [32j and made robust to inhomogeneities in both the r.f. and static fields. The implemented versions 
of the pulses were corrected for non-linearities in the signal generation and amplification process through a pickup 
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coil to measure the r.f. field at the sample and a simple feedback loop. The error probabilities for each experiment 
were calculated using a constrained maximum likelihood function. 
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